XakNet is a self-proclaimed Russian patriotic hacktivist group known for DDoS attacks, data leaks, and website defacements against Ukraine.
XakNet (UAC-0100, UAC-0106) is a self-proclaimed hacktivist group targeting Ukraine, claiming to consist of Russian patriotic volunteers. Their threat activities include DDoS attacks, data leaks, website defacements, and system compromises. Given their established connections to the GRU-sponsored APT28, the group may act as a front for espionage-driven operations. Defenders should prioritize defenses against DDoS and web defacements, while remaining highly vigilant for APT28's TTPs, such as phishing and credential harvesting, during any intrusion indicators.
XakNet is a self-proclaimed hacktivist group that has targeted Ukraine. They claim to be comprised of Russian patriotic volunteers and have conducted various threat activities, including DDoS attacks, compromises, data leaks, and website defacements. They coordinate their operations with other hacktivist groups and have connections to APT28, a cyber espionage group sponsored by the GRU.
Their main activities include DDoS attacks, data leaks, website defacements, and system compromises.
They should remain highly vigilant for APT28's TTPs, such as phishing and credential harvesting, during any intrusion indicators.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.